bf7da02ce0a728beaf44471a10eb59c8_JaffaCakes118 | Triage

Sharing

General

Target

bf7da02ce0a728beaf44471a10eb59c8_JaffaCakes118
Size

489KB
MD5

bf7da02ce0a728beaf44471a10eb59c8
SHA1

4e66dfe3dbd4e0815678699fd40434a635d6a1df
SHA256

247ef39cbfb4028f4b2ca4da247d75394b6360fde7d78ac6dd64d1da4eaf4b39
SHA512

d50abf063046b3f90fd5b8130832a5e4589417148b8d8d26f313a167ce6c73113538efbc3fcbad1f37f02b63d40bfb598a668eb8636280c89f6b0be61df86039
SSDEEP

12288:FTpp3UtLhpraBWZsSwMStD5A1nyH3siGXw:FTpp3U5zraBqsSwMsDSQl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7da02ce0a728beaf44471a10eb59c8_JaffaCakes118

Files

bf7da02ce0a728beaf44471a10eb59c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 972KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 484KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

xPfOx
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE